Re: Firewall Changes through Change Management

[Mattehew Prescott <matt.prescott () ACU EDU>]

So if the change might cause disruption then we schedule it for maintenance
times eg, firmware updates, routing changes, reboots even with our HA
setup. If I am just adding a rule or changing a rule then I just do it when
asked. Sometimes I will create a change ticket for informational purposes.
So if I add a bandwidth shaping rule, it doesn't disrupt traffic but the
help desk might get calls about slow traffic. So this informs them of a
change. I do it during regular hours.

Thanks,
Matt Prescott, Security Analyst
Information Technology
(o) 325-674-2882
Abilene Christian University
[image: Abilene Christian University]



On Tue, May 4, 2021 at 9:42 AM Kimmitt, Jonathan <
jonathan-kimmitt () utulsa edu> wrote:

> Hi all,
>
>
>
>   We are in discussions of how to include border firewall changes in the
> change management process…..
>
>
>
> Whether to require change management for any rule changes, and conduct
> during our weekly maintenance windows…..  or open it up and allow changes
> anytime during the week as is requested by Networking/Systems….
>
>
>
> I was curious to how other .edu’s do it in their environments?
>
>
>
> -Jonathan
>
>
>
>
>
>
>
> ~
>
> Jonathan Kimmitt
>
> CISSP, FIP, CDPSE, CIPP/E, CIPM, CIPT,
>
> OTCP,GLEG, GPEN, GSNA, PCIP, CEH
>
> Chief Information Security Officer
>
> Information Technology
>
> The University of Tulsa
>
> jonathan-kimmitt () utulsa edu
>
> 918.631.2743
>
>
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community